$ rpki-client -vvvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json) Hash identifier: a1DGy+TDc/0MO5U0FbetsbZNRBxGoD29mVglL8LfAt8= Subject key identifier: 7A:DF:39:7E:B8:0B:8A:D5:36:F6:F4:24:A0:25:60:D7:A2:98:D2:FC Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Certificate serial: 660FE224916D03932020BC68EE85E4FC7A2E1AF0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft Manifest number: FF Signing time: Sun 15 Nov 2026 01:23:57 +0000 Manifest this update: Sun 15 Nov 2026 01:18:57 +0000 Manifest next update: Mon 16 Nov 2026 02:12:57 +0000 Files and hashes: 1: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=) 2: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=) 3: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (hash: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=) 4: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: OKlxP70fWUnhhGhvVZvyuwg6wswSVYmzJoDKSJpPt+A=) 5: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=) 6: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=) 7: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0f:e2:24:91:6d:03:93:20:20:bc:68:ee:85:e4:fc:7a:2e:1a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Validity Not Before: Nov 15 01:18:57 2026 GMT Not After : Nov 16 02:12:57 2026 GMT Subject: CN=7ADF397EB80B8AD536F6F424A02560D7A298D2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:50:54:be:67:af:72:c5:85:3d:96:21:14:6b: b0:e5:7f:b6:20:27:94:e1:26:27:f7:e6:e1:e1:34: 4f:74:ca:18:0c:04:8c:17:5e:ce:b1:28:95:7a:a4: 5f:61:30:93:80:27:1e:56:c4:57:ca:4c:04:fb:89: ff:74:5c:3f:a0:44:09:00:68:de:5d:5b:59:de:0b: ba:ca:cd:d3:6f:f5:2b:22:af:e5:92:4a:24:39:66: 1c:32:92:c2:7e:d3:18:f0:3d:43:34:bd:14:42:6e: 6f:5a:15:67:8c:c9:86:5a:55:f7:16:8b:22:c4:06: 5c:c0:aa:f1:10:f8:cb:d3:05:a8:99:7b:5d:75:b7: d4:8f:c9:d5:bb:b6:2a:95:ec:4f:0f:2e:4d:30:0f: d9:80:8e:6d:9b:67:a0:73:b8:6f:0f:6f:b8:98:90: ca:71:91:6c:82:69:aa:72:e9:dd:61:b8:e3:81:3a: 89:2b:9a:7b:44:44:7b:78:b6:9d:d9:41:ad:c1:3c: 18:d5:fe:75:08:54:dc:6b:2a:7a:89:1f:5f:85:9d: cc:b0:72:23:5c:54:5d:31:8b:39:ef:f2:28:d4:b8: f1:44:71:64:f9:6a:32:b4:78:81:03:e5:f2:48:f5: 5e:6d:b4:39:c4:3a:dc:a1:48:05:70:d0:24:cf:87: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:39:7E:B8:0B:8A:D5:36:F6:F4:24:A0:25:60:D7:A2:98:D2:FC X509v3 Authority Key Identifier: keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:88:92:6b:9d:f3:d1:7b:b0:b9:76:c8:5a:37:d4:2f:74:8c: 6a:d6:88:99:9b:7a:fb:1f:10:3b:79:c7:f5:69:f8:f7:17:44: c6:a3:ce:a6:e8:07:0d:07:34:b1:15:f2:58:10:97:a2:3b:fb: 20:78:e9:51:11:d2:c0:0c:b8:28:90:db:83:c5:9e:74:4a:07: c6:42:58:a0:fc:2c:e8:c0:51:23:cb:56:76:db:a3:5a:00:2e: 0b:84:2e:63:0d:39:42:08:61:9c:67:98:04:51:c1:53:19:91: c4:f2:24:eb:dc:ba:5b:a4:ff:47:1e:32:f0:0f:ce:78:54:5d: b6:64:22:6f:ef:77:97:08:0a:9b:71:85:ea:3b:32:ef:97:86: 14:9a:d4:7b:29:4f:e4:0e:fe:85:cf:ae:dd:ee:8d:49:5d:e2: 01:df:da:a3:dc:74:91:5a:b9:de:b6:96:99:bc:e6:b4:47:6b: 00:29:7d:7f:36:20:ae:c2:cf:08:9a:eb:8c:b1:45:1a:c6:9b: 29:97:84:1a:6c:e6:09:f5:b6:cc:d7:e8:d7:a5:3c:c8:ea:4d: 43:85:d9:ad:e6:0b:0f:77:ac:4e:f5:7f:c6:91:6f:d3:fb:e6: 92:b2:87:f8:18:be:aa:98:8e:b1:f4:58:3e:39:f0:95:0e:bb: e6:3a:11:92 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUZg/iJJFtA5MgILxo7oXk/HouGvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF RkRDQTI1RTAeFw0yNjExMTUwMTE4NTdaFw0yNjExMTYwMjEyNTdaMDMxMTAvBgNV BAMTKDdBREYzOTdFQjgwQjhBRDUzNkY2RjQyNEEwMjU2MEQ3QTI5OEQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNUFS+Z69yxYU9liEUa7Dlf7Yg J5ThJif35uHhNE90yhgMBIwXXs6xKJV6pF9hMJOAJx5WxFfKTAT7if90XD+gRAkA aN5dW1neC7rKzdNv9Ssir+WSSiQ5ZhwyksJ+0xjwPUM0vRRCbm9aFWeMyYZaVfcW iyLEBlzAqvEQ+MvTBaiZe111t9SPydW7tiqV7E8PLk0wD9mAjm2bZ6BzuG8Pb7iY kMpxkWyCaapy6d1huOOBOokrmntERHt4tp3ZQa3BPBjV/nUIVNxrKnqJH1+Fncyw ciNcVF0xiznv8ijUuPFEcWT5ajK0eIED5fJI9V5ttDnEOtyhSAVw0CTPh35jAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUet85frgLitU29vQkoCVg16KY0vwwHwYDVR0j BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD ODNDOTJFRkRDQTI1RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zN0JDNTVDNTUz OTk3MUFGQjhGNjcwOUU4MUM4M0M5MkVGRENBMjVFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYiSa53z 0XuwuXbIWjfUL3SMataImZt6+x8QO3nH9Wn49xdExqPOpugHDQc0sRXyWBCXojv7 IHjpURHSwAy4KJDbg8WedEoHxkJYoPws6MBRI8tWdtujWgAuC4QuYw05QghhnGeY BFHBUxmRxPIk69y6W6T/Rx4y8A/OeFRdtmQib+93lwgKm3GF6jsy75eGFJrUeylP 5A7+hc+u3e6NSV3iAd/ao9x0kVq53raWmbzmtEdrACl9fzYgrsLPCJrrjLFFGsab KZeEGmzmCfW2zNfo16U8yOpNQ4XZreYLD3esTvV/xpFv0/vmkrKH+Bi+qpiOsfRY PjnwlQ675joRkg== -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:50 2026 by rpki-client